DAVITA INC.
Apr 2025 · Graded Verified · Healthcare and Life Sciences · Government record
Incident summary
DAVITA INC.Apr 2025
$25M
Total reported cost
Total incident cost
DaVita's ransomware sat inside its dialysis labs for three weeks before discovery, and the encryption was the loud part; the quiet part was a labs database pooling 2.7 million people's Social Security numbers, dialysis results, and scanned images of their personal checks. A treatment provider had become a warehouse of financial identity, the fate of any database asked to hold everything. Interlock, which claimed the theft and leaked the files, needed no exploit, only the weeks the network gave it.
Losses on the record
See the full accounting
Total incident cost · realized$25M · V
Direct expense · realized$13.5M · V
Source:
Shown individually, never summed across measures.
Verified: the linked document states this figure.
SEC 8-K, Item 8.01
Initial attack type not disclosed · Impact ransomware confirmed + data theft · Actor Interlock
Quantified 113 days after disclosure.
What the company has said it cost
The company’s own disclosed figure, as it changed over time. Some of the losses on the record are this same figure, typed and categorized; the rest carry their own sources.
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.